$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa File: df22a43e-e64f-3eee-a833-cc30d25d5a51.roa (raw, json) Hash identifier: UpKNzgU/sApKTx0ogj3gXsurKt28yeaW2VXkXFEOHoY= Subject key identifier: 0C:53:F3:C9:CB:62:D8:C6:82:A1:4F:53:2A:09:BF:05:31:B2:84:6C Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B79BCC5FB60D405C082DF7600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3356 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c5:fb:60:d4:05:c0:82:df:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=83a57883-1120-4559-9eef-a78de1ea2ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:52:2b:82:e9:46:b4:b1:7e:e4:3d:7d:69: 60:1d:f4:e8:b0:b8:91:ac:fd:ca:cd:ed:6f:8e:8b: c9:fc:56:04:3f:89:d5:89:73:9e:ab:24:18:88:4e: 3b:52:f1:77:e7:02:f2:47:89:f1:d3:4e:f2:e7:28: bb:85:6e:38:6d:d8:69:d4:34:f5:57:c2:ba:a1:20: 60:e2:ea:bd:13:6a:ed:42:b6:37:bb:69:ee:b2:4d: 66:4e:61:52:f7:de:44:40:63:10:8e:15:81:a1:df: b8:1a:16:5c:09:a8:07:c2:90:ee:39:93:75:46:99: 66:e4:ab:68:1c:ad:3a:9a:86:c2:79:cc:9f:26:6a: 50:8f:fe:33:c4:79:1d:5b:75:ba:fd:78:66:4a:fb: ba:7e:1d:db:8e:57:1b:0d:8e:6a:20:98:02:49:19: c7:b1:ec:5c:98:c1:d1:70:c8:14:87:51:49:eb:f3: 53:c0:e2:d0:37:db:3f:79:30:4d:4f:6e:e9:ae:f6: b2:24:c1:9b:4a:c3:bd:30:59:f0:20:91:8b:03:6e: 10:72:65:c7:8f:7a:f1:b5:e1:89:e5:c3:37:81:fb: 0d:3f:52:30:f7:6a:21:b1:bc:3b:5a:25:b4:9d:88: 60:06:d5:bd:73:37:9b:bd:a6:30:3e:95:55:c8:4c: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:53:F3:C9:CB:62:D8:C6:82:A1:4F:53:2A:09:BF:05:31:B2:84:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/df22a43e-e64f-3eee-a833-cc30d25d5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:39:40:dd:52:82:2a:58:60:6e:fb:7b:59:e8:d0:55:65:76: 7a:09:3c:f8:f3:25:c6:9f:43:ce:58:36:86:fc:76:34:12:1d: f6:c0:53:9b:fd:fa:d6:c6:f8:27:a8:41:d9:48:5a:87:b3:6c: 11:99:d2:b6:45:ea:32:8e:5c:8b:8b:e9:68:45:34:f3:28:f5: 5a:14:96:4b:ab:b1:b9:f5:ea:bd:ff:75:08:d8:a2:35:04:a5: e2:5f:00:6f:81:ae:ca:5b:2a:6e:5b:41:16:06:52:60:38:d9: 34:cb:fe:e6:8d:6b:ba:bf:45:25:43:d9:43:24:37:ce:34:53: 56:27:32:61:63:17:b2:78:0c:23:73:e4:b0:ea:b4:84:bc:cb: 94:17:6c:f0:6a:77:87:62:41:56:55:50:8c:56:65:02:9f:37: fb:4d:09:04:d2:aa:ee:0c:4f:24:fb:39:d9:0d:f3:f4:af:47: 1d:e5:97:e1:61:f2:e0:fd:4f:5b:17:5a:15:df:c2:1c:3a:2a: 2f:88:74:69:a5:7b:8a:3e:32:fa:35:87:8b:9a:85:5d:95:e8: ea:51:31:31:05:2d:e6:c6:a9:e0:e8:51:38:11:6a:14:d4:8c: a8:75:51:67:0c:e9:e0:ee:2d:79:5b:46:dc:81:f1:ac:5b:d4: 4b:f1:d6:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMX7YNQFwILfdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ODNhNTc4ODMtMTEyMC00NTU5LTllZWYtYTc4ZGUxZWEyY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDdSK4LpRrSxfuQ9fWlgHfTosLiRrP3Kze1v jovJ/FYEP4nViXOeqyQYiE47UvF35wLyR4nx007y5yi7hW44bdhp1DT1V8K6oSBg 4uq9E2rtQrY3u2nusk1mTmFS995EQGMQjhWBod+4GhZcCagHwpDuOZN1Rplm5Kto HK06mobCecyfJmpQj/4zxHkdW3W6/XhmSvu6fh3bjlcbDY5qIJgCSRnHsexcmMHR cMgUh1FJ6/NTwOLQN9s/eTBNT27prvayJMGbSsO9MFnwIJGLA24QcmXHj3rxteGJ 5cM3gfsNP1Iw92ohsbw7WiW0nYhgBtW9czebvaYwPpVVyEynKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxT88nLYtjGgqFPUyoJvwUxsoRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZGYyMmE0M2UtZTY0Zi0z ZWVlLWE4MzMtY2MzMGQyNWQ1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA5QN1SgipYYG77e1no0FVldnoJPPjzJcafQ85YNob8djQSHfbAU5v9 +tbG+CeoQdlIWoezbBGZ0rZF6jKOXIuL6WhFNPMo9VoUlkursbn16r3/dQjYojUE peJfAG+BrspbKm5bQRYGUmA42TTL/uaNa7q/RSVD2UMkN840U1YnMmFjF7J4DCNz 5LDqtIS8y5QXbPBqd4diQVZVUIxWZQKfN/tNCQTSqu4MTyT7OdkN8/SvRx3ll+Fh 8uD9T1sXWhXfwhw6Ki+IdGmle4o+Mvo1h4uahV2V6OpRMTEFLebGqeDoUTgRahTU jKh1UWcM6eDuLXlbRtyB8axb1Evx1rg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:13 2025 by rpki-client